frontend-resume
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard third-party Python libraries used for parsing document formats.
- Evidence: Documentation in
SKILL.mdandREADME.mdsuggests installingpdfplumber,python-docx, andPyPDF2to handle PDF and Word file extraction. - [COMMAND_EXECUTION]: The skill executes a bundled script to process local resume files.
- Evidence:
SKILL.mddefines a step to runpython scripts/extract_resume.pyon user-provided files to extract text and structural metadata. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes content from untrusted external documents.
- Ingestion points:
scripts/extract_resume.pyingests text from user-uploaded .pdf, .docx, .md, .txt, and .json files. - Boundary markers: The workflow requires the agent to present extracted text to the user for confirmation and modification in Phase 1 before any code generation occurs.
- Capability inventory: The skill executes a local Python script for data processing and generates HTML/JS files within the workspace.
- Sanitization: The extraction script cleans Markdown formatting and the agent's output is limited by the structured architecture defined in
references/HTML_ARCHITECTURE.md.
Audit Metadata